gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-13 08:36:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(config): default trusted proxies to loopback-only (#4508)

Browse Source
This commit is contained in:
Zhengchao An
2026-07-09 01:06:11 +08:00
committed by GitHub
parent 5bbbe0008e
commit d1245ca33c
3 changed files with 70 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/config/src/constants/proxy.rs
+4 -2
View File
@@ -53,8 +53,10 @@ pub const DEFAULT_TRUSTED_PROXY_LOG_FAILED_VALIDATIONS: bool = true;
// ==================== Trusted Proxy Networks ====================
/// Environment variable for the list of trusted proxy networks (comma-separated IP/CIDR).
pub const ENV_TRUSTED_PROXY_PROXIES: &str = "RUSTFS_TRUSTED_PROXY_NETWORKS";
/// Default trusted networks include localhost and common private ranges.
pub const DEFAULT_TRUSTED_PROXY_PROXIES: &str = "127.0.0.1,::1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fd00::/8";
/// Default trusted networks are loopback-only. Private/RFC1918 ranges are not
/// trusted by default: an operator must explicitly add the specific proxy
/// addresses in front of this server to have forwarding headers honored.
pub const DEFAULT_TRUSTED_PROXY_PROXIES: &str = "127.0.0.1,::1";
/// Environment variable for additional trusted proxy networks (production specific).
pub const ENV_TRUSTED_PROXY_EXTRA_PROXIES: &str = "RUSTFS_TRUSTED_PROXY_EXTRA_NETWORKS";